6288885 2001-03-29 09:14 -0800 /76 rader/ Greg KH <greg@WIREX.COM>
Sänt av: joel@lysator.liu.se
Importerad: 2001-03-30 07:36 av Brevbäraren
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: greg@WIREX.COM
Mottagare: Bugtraq (import) <16220>
Ärende: Immunix OS Security update for vim
------------------------------------------------------------
-----------------------------------------------------------------------
Immunix OS Security Advisory
Packages updated: vim
Affected products: Immunix OS 6.2, 7.0-beta, and 7.0
Bugs Fixed: immunix/1521
Date: March 28, 2001
Advisory ID: IMNX-2001-70-011-01
Author: Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------
Description:
An attacker could embed malicious VIM control codes into a file, and
as soon as any user opened that file in vim-enhanced or vim-X11 with
the status line option enabled in .vimrc, the commands would be
executed as that user. For more information on this see
http://groups.yahoo.com/group/vim/message/17299
Packages have been created and released that fix these problems.
Package names and locations:
Precompiled binary packages for Immunix 6.2 are available at:
http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-X11-5.7-0.6x_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-common-5.7-0.6x_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-enhanced-5.7-0.6x_StackGuard.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-minimal-5.7-0.6x_StackGuard.i386.rpm
Source package for Immunix 6.2 is available at:
http://immunix.org/ImmunixOS/6.2/updates/SRPMS/vim-5.7-0.6x_StackGuard.src.rpm
Precompiled binary packages for Immunix 7.0-beta and 7.0 are available at:
http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-X11-5.7-8_imnx.i386.rpm
http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-common-5.7-8_imnx.i386.rpm
http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-enhanced-5.7-8_imnx.i386.rpm
http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-minimal-5.7-8_imnx.i386.rpm
Source package for Immunix 7.0-beta and 7.0 is available at:
http://immunix.org/ImmunixOS/7.0/updates/SRPMS/vim-5.7-8_imnx.src.rpm
md5sums of the packages:
e67b0e47c0f9951100d29961008e120c vim-X11-5.7-0.6x_StackGuard.i386.rpm
2153e3c0cb891e5cc1040bc3f6b21db4 vim-common-5.7-0.6x_StackGuard.i386.rpm
02a2fcab853fa1138f01777f9bb97948 vim-enhanced-5.7-0.6x_StackGuard.i386.rpm
20481bbbfe07a7eeb9eca16be74aeb6c vim-minimal-5.7-0.6x_StackGuard.i386.rpm
442d3198d10d42e164fa792f3696ac94 vim-5.7-0.6x_StackGuard.src.rpm
e60540c7e159ee6c989a3f51436bb4b9 vim-X11-5.7-8_imnx.i386.rpm
23780ce98f4482d4ff1b80c6df23b1a3 vim-common-5.7-8_imnx.i386.rpm
47de143756db2a52d84e54b55b28ef0a vim-enhanced-5.7-8_imnx.i386.rpm
6ad7c0aecef55646c2c7e3ce28c6f786 vim-minimal-5.7-8_imnx.i386.rpm
786e710e03f43da5336e083f7c06847b vim-5.7-8_imnx.src.rpm
Online version of all Immunix 6.2 updates and advisories:
http://immunix.org/ImmunixOS/6.2/updates/
Online version of all Immunix 7.0-beta updates and advisories:
http://immunix.org/ImmunixOS/7.0-beta/updates/
Online version of all Immunix 7.0 updates and advisories:
http://immunix.org/ImmunixOS/7.0/updates/
NOTE:
Ibiblio is graciously mirroring our updates, so if the links above are
slow, please try:
ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
or one of the many mirrors available at:
http://www.ibiblio.org/pub/Linux/MIRRORS.html
(6288885) /Greg KH <greg@WIREX.COM>/----------------
Bilaga (application/pgp-signature) i text 6288886
6288886 2001-03-29 09:14 -0800 /10 rader/ Greg KH <greg@WIREX.COM>
Importerad: 2001-03-30 07:36 av Brevbäraren
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: greg@WIREX.COM
Mottagare: Bugtraq (import) <16221>
Bilaga (text/plain) till text 6288885
Ärende: Bilaga till: Immunix OS Security update for vim
------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6w22EAl5ylTeuKpURAt4sAKDnhKKRKmbYCrXYZ+fUi5MXgmrOdQCgp7lS
LBtNwqU5Ft5EG3wiGT27uq0=
=or8m
-----END PGP SIGNATURE-----
(6288886) /Greg KH <greg@WIREX.COM>/----------------